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Abstract — The key step of syndrome-based decoding of Reed- 
Solomon codes up to half the minimum distance is to solve 
the so-called Key Equation. List decoding algorithms, capable 
of decoding beyond half the minimum distance, are based on 
interpolation and factorization of multivariate polynomials. This 
article provides a link between syndrome-based decoding ap- 
proaches based on Key Equations and the interpolation-based list 
decoding algorithms of Guruswami and Sudan for Reed-Solomon 
codes. The original interpolation conditions of Guruswami and 
Sudan for Reed-Solomon codes are reformulated in terms of 
a set of Key Equations. These equations provide a structured 
homogeneous Unear system of equations of Block-Hankel form, 
that can be solved by an adaption of the Fundamental Iterative 
Algorithm. For an (n, k) Reed-Solomon code, a multiplicity s 
and a list size £, our algorithm has time complexity O [is'^n^). 

Index Terms — Guruswami-Sudan interpolation. Key Equation, 
list decoding. Fundamental Iterative Algorithm (FIA), Reed- 
Solomon codes, Hankel matrix, Block-Hankel matrix. 



I. Introduction 

IN 1999, Guruswami and Sudan |[3)-||5| extended Sudan's 
original approach |6| by introducing multiplicities in the 
interpolation step of their polynomial-time list decoding pro- 
cedure for Reed-Solomon and Algebraic Geometric codes. 
This modification permits decoding of (n, k) Reed-Solomon 
codes ||7j| (and Algebraic Geometric codes) of arbitrary code- 
rate R = k/n with increased decoding radius. Guruswami 
and Sudan were focused on the existence of a polynomial-time 
algorithm. Kotter |8| and Roth-Ruckenstein |9|, |10| proposed 
quadratic time algorithms for the key steps of the Guruswami- 
Sudan principle for Reed-Solomon codes, i.e., interpolation 
and factorization of bivariate polynomials. Various other ap- 
proaches for a low-complexity realization of Guruswami- 
Sudan exist, e.g. the work of Alekhnovich pT[ , where fast 
computer algebra techniques are used. Trifonov's fl2] contri- 
butions rely on ideal theory and divide and conquer methods. 
Sakata uses Grobner-bases techniques [ |13| , ]14( . 

In this paper, we reformulate the bivariate interpolation step 
of Guruswami-Sudan for Reed-Solomon codes in a set of 
univariate Key Equations fTl. This extends the previous work 
of Roth and Ruckenstein |]9), i fTOl , where the reformulation 
was done for the special case of Sudan. Furthermore, we 
present a modification of the so-called Fundamental Iterative 

Parts of this work were published in the proceedings of 2008 IEEE Inter- 
national Symposium on Information Theory (ISIT 2008), Toronto, Canada 1 1] 
and 2009 IEEE Information Theory Workshop (ITW 2009), Taormina, 
Sicily, Italy |2|. This work was supported by the German Research Council 
"Deutsche Forschungsgemeinschaft" (DFG) under Grant No. Bo867/22-I. 



Algorithm (FIA), proposed by Feng and Tzeng in 1991 p3) . 
Adjusted to the special case of one Hankel matrix the FIA 
resembles the approach of Berlekamp and Massey |16), p7) . 

Independently of our contribution, Beelen and H0holdt 
reformulated the Guruswami-Sudan constraints for Algebraic 
Geometric codes | .18| , 1 19J . It is not clear, if the system they 
obtain is highly structured. 

This contribution is structured as follows. The next sec- 
tion contains basic definitions for Reed-Solomon codes and 
bivariate polynomials. In Section III we derive the Key 
Equation for conventional decoding of Reed-Solomon codes 
from the Welch-Berlekamp approach |20| and we present the 
adjustment of the FIA for one Hankel matrix. A modified 
version of Sudan's reformulated interpolation problem based 
on the work of Roth-Ruckenstein |9| is derived and the 



adjustment of the FIA for this case is illustrated in Section IV 



In Section |V] the interpolation step of the Guruswami-Sudan 
principle is reformulated. The obtained homogeneous set of 
linear equations has Block-Hankel structure. We adjust the FIA 
for this Block-Hankel structure, prove the correctness of the 
proposed algorithm and analyze its complexity. We conclude 
this contribution in Section FVll 

II. Definitions and Preliminaries 

Throughout this paper, [n] denotes the set of integers 
{1,2, ... ,n} and [n]o denotes the set of integers {0, 1, . . . , n— 
1}. An mxn matrix A = consists of the entries Aij, 

where i e [m]o and j E [n]o. A univariate polynomial A{x) 
of degree less than n is denoted by A{x) — J^^^o AiX^. A 
vector of length n is represented by r = (ri, r2, . . . , rn)^ . 

Let g be a power of a prime and let F — GF(q) denote 
the finite field of order q. Let ai,a2, ■ . . ,an denote nonzero 
distinct elements (code-locators) of F and let v'i,v'2, . . . , 
denote nonzero elements (column-multipliers), the associated 
evaluation map ev is 



V[x\ F" 

f{x) i-> {v[f{ai),v'2f{a2),...,v'^f{an))- 



(1) 



The associated Generalized Reed-Solomon code QTZS{n, k) 
of length n and dimension k is pTl: 



gnS{n, fc) = {c = ev(/(a;)) : fix) G Ffc[x]}, (2) 

where F^ [x] denotes the set of all univariate polynomials with 
degree less than k. Generalized Reed-Solomon codes are MDS 
codes with minimum distance d = n — k + 1. The dual of 
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a Generalized Reed-Solomon is also a Generalized Reed- 
Solomon code with the same code locators and column mul- 
tipliers vi,V2,---, Vn, where X^Li = 0, j G 
The explicit form of the column multipliers is |22|: 

1 1 ■ r 1 

I G \n\. 



l]o. 



(3) 



We will take advantage of structured matrices and therefore 
we recall the definition of a Hankel matrix in the following. 
Definition 1 (Hankel Matrix): An m x n Hankel matrix 



S^ 



for all 



S = llS'i.jll is a matrix, where Sij 
i E [m — 1] and j G [n — l]o holds. 

Let us recall some properties of bivariate polynomials in 

¥[x,y]. 

Definition 2 (Weighted Degree): Let the polynomial 
A(x,y) = Y^i,j A^^^x'-y^ be in F[a;, y]. Then, the (^■Wx,Wy)- 



- Af x'^y^ be in F[a;, y]. Then, the (wxTVjy) 
weighted degree of A{x,y), denoted by wdegw^,w , is the 



maximum over all iwx + jwy such that A^^ ^ 0. 

Definition 3 (Multiplicity and Hasse Derivative ^23'^ ): Let 

'x^y^ 



A(a;, y) = Yliij^i^^V'' ^ polynomial in F[a:,y]. Let 



A(x,y) = A{x + a, y + /3) = X)i j^i x^V'' ■ A bivariate 
polynomial A{x, y) has at least multipUcity s in the point 
(a, /3), denoted by 



mult {A{x,y),{a,l3)) > 



(4) 



r(i) 



if the coefficients A/' are zero for all i+j < s. Furthermore, 
the (a, 6)th Hasse derivative of the polynomial A{x,y) in the 
point {a, f3) is 



^['^'''1 (a, /3) 



E 



(5) 



Let A^^^x^y) — A^'^'^^x.y) denote the 6th Hasse derivative 
of A{x,y) with respect to the variable y. 

We will use the inner product for bivariate polynomials to 
describe our algorithms. 

Definition 4 (Inner Product): Let two polynomials 

A{x,y) = i:^,,^^x^y' and B{x,y) = E.^^ B^'^ x^y^ 
in F[a;,y] be given. The inner product {A{x,y), B{x,y)) of 
A{x,y) and B{x,y) is defined by Y.i,j B^^^ ■ 

III. Welch-Berlekamp as List-One Decoder and 
THE Fundamental Iterative Algorithm 

A. Syndrome-Based Decoding of Reed-Solomon Codes 

Let e = (ei, 62, . . . , e„) denote the error word and let J' 
be the set of error locations (that is ej ^ -i^ j E J). Let 
r = [(n — fc)/2j . It is well-known that a QTlS{n, k) code can 
recover uniquely any error pattern if and only if \J^\ < t. The 
n — k syndrome coefficients Sq, Si, . . . , Sn-k-i depend only 
on the error word e and the associated syndrome polynomial 
S{x) is defined by ||22): 



Six) 



i-k-l 

E 

i=0 



S.x'' 



^-^ 1 — OLaX 



mod x^' 



The error-locator polynomial is A(a;) = 11^6^(1 ~ '^jx) 
and the error-evaluator polynomial ^(x) is 



Ejej/ejO^j n,gj^{^.j(l - a^x). They are related by 
the Key Equation: 



?L{x) _ 



Six) mod : 



(6) 



The main steps for conventional decoding up to half the 
minimum distance are: 

1) Calculate the syndrome polynomial Six) from the re- 
ceived word r = c + e. 

2) Solve (|6]l for the error-locator polynomial A(x) and 
determine its roots. 

3) Compute and then determine the error values. 

B. Derivation of the Key Equation from Welch-Berlekamp 

We derive the classical Key Equation (j6]l from the sim- 
plest interpolation based decoding algorithm, reported as the 
"Welch-Berlekamp" decoding algorithm i n ||24| -p6}. We 
provide a simpler representation than in |20| and give a 
polynomial derivation of the Key Equation. 

Consider a QTZS{n, k) code with support set 
ai, q;2, . . . , a„, multipliers uj.: ^2' • • ■ i '^n and dimension 
k. The Welch-Berlekamp approach is based on the following 
lemma ||27] Ch. 5.2]: 

Lemma 1 (List-One Decoder): Let c = cv{f{x)) be a 
codeword of a QTlS{n, k) code and let r = c + e = 
(ri, r2, . . . , r„) be the received word. We search for a poly- 
nomial Q{x,y) = Q(°)(a;) +Q(i) {x)y in ¥[x, y] such that: 

1) Q{x,y)^0, 

2) Q{a,,n/v[)=0 Vi G [n], 

3) wdegi,k-i Q{x, y) <n-T. 

If c has distance less than or equal to [{n — k)/2\ from the 
received word r, then f{x) ~ — Q^°''(a;)/Q^^^(a;). 
Let us connect Lemma [T] to (|6]l. 

Proposition 1 (Univariate Reformulation): Let be the 
Lagrange interpolation polynomial, such that R{ai) = 
Ti/u-, i G [n] holds. Let G{x) = n"=i(^ ~ Q^i)- Then 
Qix,y) = (5(°)(x)+Q(^)(a;)y satisfies Conditions 2jandij of 
Lemma[T|if and only if there exists a polynomial B{x) G F[a::] 
such that 



Q{x,R{x)) ^ B{x) ■ G(a;), 



(7) 



0, 1. Define the following 



and dcgB{x) < n — k — t. 
Let Nt = n - T - t{k - 1), t 
reciprocal polynomials: 

R{x)^x''~^ -Rix-^), 

n 

G{x) = a;" • G(x-^) = ]J(1 - a,x), 

i=l 

Inverting the order of the coefficients of (|7]i leads to: 

^„-r+n-fe-l^g(0)(^-l) ^ qW(x~^).R(x~^)) 

= n{x)-G{x) 

With (HJ, we obtain: 

2.n-fc^(0)(^) + A(i)(a;) • R{x) = n{x) ■ G{x), 



(8) 
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which we can consider modulo x" ^ . We obtain 

K^^\x) ■ R{x) EE n{x) ■ G{x) mod 



(9) 



Since G{0) ^ 0, we can define the formal power series 

R{x)/G{x): 



(10) 



Using the column multipliers Q for the dual code, it can be 
verified that S{x) is the series of syndromes with 



(11) 



(12) 



Thus, dividing ^ by G{x), we obtain 

S{x) ■ K^^\x) = n{x) moda;"-^ 

which corresponds to the classical Key Equation (|6|. The 
syndrome polynomial is S{x) mod x"^''', and A(^)(a;) is the 
error-locator polynomial A(a;). 

In the case of r errors, we consider only the terms of the 
Key Equation of degree greater than n — k — r and we get the 
following homogeneous linear system of equations: 

S-O ^1 ... Sr \ ( ^r^ \ 

Si S2 ... Sr+1 



I 



\ Sr-1 Sr 



A, 



(1) 



0. 



(13) 



^2.-1 / \ A^^' J 



The above syndrome matrix S — ||*S'ij|| for all i e [t]o 
and j £ [r + l]o has Hankel form (see Definition [T]). Equa- 
tion ( [T2] ) can be solved by the well-known Berlekamp-Massey 
algorithm | |T6| , | [T7| or with a modification of the Extended 
Euclidean algorithm f28l. The parallels of the Berlekamp- 
Massey algorithm and the Extended Euclidean algorithm have 
been considered in |j29)-|(3lj. 

We consider in the following the FIA (15], that can be 
used to find the first /i + 1 linearly dependent columns and 
connection coefficients Ti, . . . , for an arbitrary matrix. 
The FIA allows a significant reduction of complexity when 



adjusted to a Hankel matrix as in ( 13 1. 



C. The FIA for One Hankel Matrix 
Given an arbitrary m x n matrix A 



|A, ,||, the FIA 



outputs the minimal number of /i + 1 linearly dependent 
columns together with the polynomial T{x) = X]j=o-^J^"'' 
with Tf, ^ 0, such that I]j=o^i^'J = 0, i € [m]o 
holds. The FIA scans the /ith column of the matrix A row- 
wise in the order Ao^^,Ai,f^, . . . and uses previously stored 
polynomials to update the current polynomial T{x). Let fi 
be the index of the current column under inspection, and let 
^(^) — J2j=o'^j^^ current candidate polynomial that 

satisfies: 



3=0 



for some value of the row index k. In other words, the 
coefficients of the polynomial T{x) give us the vanishing 



linear combination of the matrix consisting of the first k rows 
and the first /i + 1 columns of the matrix A. Suppose that the 
discrepancy: 



3=0 



(14) 



for next row k is nonzero. If there exists a previously stored 
polynomial T'^'^'>{x) and a nonzero discrepancy A*^"), cor- 
responding to row K, then the current polynomial T{x) is 
updated in the following way: 

T{x)^T{x)^^T(^\x). (15) 

The proof of the above update rule is straightforward p3| . 

In the case A 7^ and there is no discrepancy A^'^'> stored, 
the actual discrepancy A is stored as A^"^. The corresponding 
auxiliary polynomial is stored as T^'^\x). Then, the FIA 
examines a new column fi + 1. 

Definition 5 (True Discrepancy): Let the FIA examine the 
Kth row of the fj,\h column of matrix A . Furthermore, let the 
calculated discrepancy ( 14 1 be nonzero and no other nonzero 
discrepancy be stored for row k. Then, the FIA examines a 
new column /i + 1. We call this case a true discrepancy. 

Theorem 1 ( Correctness and Complexity of the FIA /75]/j.- 



For an m X n matrix with n > m, the Fundamental Iterative 
Algorithm stops, when the row pointer has reached the 
last row of column /i. Then, the last polynomial T^^^^{x) 
corresponds to a valid combination of the first /i + 1 columns. 
The complexity of the algorithm is 0{m?). 

For a Hankel matrix S (as in Definition [TJ, the FIA can 
be adjusted. Assume the case of a true discrepancy, when the 
FIA examines the Kth row of the pi\\ column of the structured 
matrix S. The current polynomial is T{x). Then, the FIA starts 
examining the [p + l)th column at row k — 1 with T{x) 
X ■ T{x) and not at row zero. This reduces the cubic time 
complexity into a quadratic time complexity p3| . 

To illustrate the complexity reduction of the FIA when 
adjusted to a Hankel matrix (compared to the original, un- 
adjusted FIA), we traced the examined rows for each column 
in Figure [T| Figure 1(a) shows the values of k of the FIA 
without any adaption. The row pointer k of the adapted FIA 



is traced in Figure 1(b) 



The points on the lines in both figures indicate the case, 
where a true discrepancy has been encountered. 

IV. Sudan Interpolation Step with a Horizontal 
Band of Hankel Matrices 

A. Univariate Reformulation of the Sudan Interpolation Step 

In this section, we recall parts of the work of Roth and 
Ruckenstein |9|, | [T0| for the interpolation step of the Sudan |j6| 
principle. The aimed decoding radius is denoted by r, the 
corresponding list size is £. 

Problem 1 (Sudan Interpolation Step l^): Let the aimed 
decoding radius r and the received word (ri, r2, . . . , r„) be 
given. The Sudan interpolation step determines a polynomial 
Qi^,y) = ELoQ^^'^W e F[x,y], such that 

1) Qix,y)^0, 
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CplumTi gf mMrix S CoLuinn tjf maJris S 

(a) Classic FIA (unadjusted) (b) Adjusted FIA 



Fig. 1. Illustration of the row pointer k of the classic FIA (Sub-figure |l(a)^ and of the adjusted FIA (Sub-figure |l(b)^ when both algorithms are applied to 
the same 6x7 Hankel syndrome matrix of a Q'R.S{lfi, 4) code. The dots indicate a true discrepancy. In this case, both algorithms enter a new column, but 
with different initial values of their row pointers. 



2) g(a„r,/uO =0, Vie [n], 

3) wdegi,k-i (9(a;,2/) < n - T. 

We present here a slightly modified version of to get an 
appropriate basis for the extension to the interpolation step in 
the Guruswami-Sudan case. 

We have dcgQW(a;) < TVi =^ n - r - t{k - 1), t e 
[£ + 1]q. Let R{x) be the Lagrange interpolation polynomial, 
s.t. R{ai) ~ ri/v'^, i S [n] and G{x) = nr=i(^ ~ ^i)- 
reciprocal polynomial of Q'^*-\x) is denoted by A(*^(x) = 
x^'-iqW(.t-1). 

Similar to Proposition [T] Roth-Ruckenstein fO^ proved the 
following. There is an interpolation polynomial Q{x,y) satis- 
fying Conditions |2] and [3] if and only if there exists a univariate 
polynomial B{x) with degree smaller than £{n — k) — t, s.t. 
Q{x,R{x)) = B{x) ■ G(x). 

Let the reciprocal polynomials be defined as in ([8]l. From |9, 
Equation (19)] we have: 



t=o 



(16) 



= B{x) ■ G{x) mod a;"-^+^("-'=\ 
where degB{x) < £{n—k)—T. We introduce the power series 



RjxY 



i=0 



Inserting (17i into (16 1 leads to: 



^A(*)(a;).a;(^-*)("-^-) •rW(a;) 



(17) 



(18) 



= B{x) mod 

Based on ([TSj we can now define syndromes for Problem [T] 
Definition 6 (Syndromes for Sudan): The £ + 1 generalized 
syndrome polynomials S^*^\x) =^ X)"=o^'~^ sf^x^ are given 
by: 

Sf^ ^Tl^it-i)in-iy i€[n + A^,]o, te[£+lW (19) 



The first order Extended Key Equation is: 



E 

t=0 



A(*)(x) • S^'\x) = B{x) mod 



(20) 



with degB{x) < £{n - k) -t. 
An explicit form of sf^ is: 

"n- t 

SP = V v.^al ie[n + Nt]o, te[£+ l]o. (21) 



3 = 1 



"3 



Note 1: In a further degree reduction is proposed. 
Then (18 1, is modulo x'^~^ and the polynomial A'^*'^(x) 



disappears. We do not present this improvement here, because 
we cannot properly reproduce this behavior in the Guruswami- 
Sudan case (see Note [2]l. 



The degree of the LHS of (1 6 1 is smaller than n — T+£{n — k). 
If we consider the terms of degree higher than £{n — k) — T, we 
obtain n homogeneous linear equations. Reverting back to the 
originals univariate polynomials Q*^*) (x), we get the following 
system: 



e Nt-i 

EE 

t=0 1=0 

it) nW 



(t) r,(t) 



0, j e [n]o. 



(22) 



WithQ(*)-(Q[,'\Qi' 
ing matrix form: 



QTvi-i)"^' obtain the foUow- 



= 0, 



(23) 



where each sub-matrix S^*) = ll'S'-^ ||, i e [n]o,i e [Nt]Q,t e 
[i! + l]o is a Hankel matrix. The £ + 1 syndrome polynomials 
5(*)(a;) = J2^2o^ S^x' of Definition @ are associated with 



this horizontal band of • 



1 Hankel matrices by S^^j — >-Ji^j- 



(t) 



In the following, we describe how the FIA can be adapted 



to solve the homogeneous system of equations ( 23 i 
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B. Adjustment of the FIA for the Reformulated Sudan Inter- 
polation Problem 

The FIA can directly be applied to the matrix 
I |S(o) S(i) • • • S(^) 1 1 of but if we want to take advantage 
of the Hankel structure we have to scan the columns of 
||S(")s'^-' ••• S^^'ll in a manner given by the weighted 
degree requirement of the interpolation problem. 

Let -<H denote the ordering for the pairs {{v,ii)\v G + 
l]oand/i G N}, where {v,^) -<h {V,~p) is given by: 

V + ^{k - I) <V + Jl{k - 1) 
or 

+ — 1) =V + ]l{k — 1) and fi <]I. 



(24) 



The pair that immediately follows {ly, /i) with respect to 
the order defined by -<h is denoted by succ(^//, (i^, /i)). 
The columns of the matrix S = ||S(o)S(i) ••• S(^)|| are 
reordered according to The pair (z^, /i) indexes the /xth 
column of lyth sub-matrix S''^^ More explicitly, we obtain the 
following matrix S', where the columns of S are reordered 



(see Equation (25 1). 

The corresponding homogeneous system of equations can 
now be written in terms of the inner product for bivariate 
polynomials (see Definition [4|i. 

Problem 2 (Reformulated Sudan Interpolation Problem): 
Let the £ + 1 syndrome polynomials S''°''(a;),S''^^'(a;),. . . , 
S'*^^^(a;) be given by Definition ^ and let S{x,y) =^ 
^^^Q S**^*' (x)?/* be the corresponding bivariate syndrome 
polynomial. We search a nonzero bivariate polynomial 
T{x, y) such that: 



{x'^T{x,y),S{x,y)) =Q, k G Mo- 



(26) 



Hence, the bivariate polynomial T{x, y) is a valid interpolation 
polynomial for Problemjl] Note that each polynomial S'--*'\x), 
as defined in ( 16 1, has degree smaller than Nt+n—l.To index 



(27) 



the columns of the rearranged matrix S', let 

Cu^^ = \{{t,i)\{t,i) <H {v,l^)}\- 

Algorithm [T] is the modified FIA for solving Problem|2] In con- 
trast to the original Roth-Ruckenstein adaption we consider all 
n homogeneous linear equations (instead of t), according to 
Note [T] The column pointer is given by (t^, /i), for indexing 
the jjlh column of the uth sub-matrix S'"^'. Algorithm hi 
virtually scans the rearranged matrix S' column after column 
(see Line 23 of Algorithm [T]i. The true discrepancy value for 
row K is stored in array D as D[k\, and the corresponding 
intermediate bivariate polynomial is stored in array A as A[n]. 



The discrepancy calculation and the update rule (see ^\A\ 
and (15 1 for the basic FIA) is adapted to the bivariate case 
(see Line 16 of Algorithm lib. For each sub-matrix S*^"', the 
previous value of the row pointer n is stored in an array R 
as R[v\. We prove the initialization rule for the FIA solving 
Problem [2] in the following proposition. 

Algorithm 1: Algorithm Solving Problem |2] 

Input: Bivariate polynomial S(x,y) = X]t=o 
Output: Bivariate polynomial T(x,y); 

Data structures : 

Bivariate polynomial T{x,y) = X]t=o ^'''(^Os/*' 
Column pointers {v,^), where v e [i'Jg, ji e [A'^lo; 
Row pointer k. G [n]o; 
Array D of n entries in F; 
Array R of I entries in N; 
Array A of n entries in ¥[x,y]\ 

Variable A G F, variable compute G {TRUE, FALSE}; 

Initialize : 

for i G [n]o do 
L D[i] ^ 0; 

for i G [e. + l]o do 

L R[i] ^ 0; 
^ (0,0), 

1 while K < n do 

2 if compute then 

I {x--T{x,y),Six,y))- 
else 

if R[u]<l then 

T{x,y) ^ y" ■ x^; 



0, compute ^ FALSE; 



9 
10 
11 
12 



14 
15 
16 

17 
18 
19 
20 
21 
22 
23 



A ■ 



0; 



("). 



else 



T{x,y)^x-A[R[iy]]{x,y); 
A ^ D[R[u]]; 
K ^ R[iy] - 1; 

compute ^ TRUE; 

if A = or D[k] ^ then 
if A 7^ then 

lT{x,y)^ .A A 

K ^ K + 1; 
else /* A 7^ and D[k 
A[K]^T{x,y)- 

^ A; 
R[v] ^ K- 
compute FALSE; 
{iy,y) ^ succ(^if, {i^,y)) 



T{x,y)- ^yA[K]{x,y)- 



*/ 



Proposition 2 (Initialization Rule): Assume Algorithm [T| 
examines column (i^, /i) of a syndrome matrix S = 



SI 



(0) 



(0) 



(0) 



S. 



(0) 



5. 



(0) 



(0) 



k-l 



c(0) ok 



c(0) 

:(o) 



5* 



:(o) 



s; 



(1) 



(1) 



s. 



(1) 



c.(l) 

cv>'; 0(1) 

'^2(fe-2) '^fe-l 



c(0) 
'-'2fe-3 



C(0) q{l} 

'^n+2(fe-2) '^n-k-3 



S 



(£-1) 



s 



S 



0(^-1) qW 



(25) 
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i n s 10 12 i'\ 

Columii of vBBiran^il matrix S' 

Fig. 2. Illustration of the row pointer k of Algorithm[T]applied to a horizontal 
band of three Hankel matrices S'"', S'^' and S^^) . The columns of the 16x 18 
matrix S' are arranged under -ordering. The three lines S^-^\ 5"'^' and S'^^ 
trace the row pointer for each sub-matrix S^"', S'^' and S'^'. 



TABLE I 

Column-index Cv,^ and column pointer {u, fi) of the 

RE-ARRANGED MATRIX S' OF THE REFORMULATED SUDAN 
INTERPOLATION STEP FOR A 57?.5(16, 4) CODE WITH DECODING 
RADIUS r = 7 AND LIST SIZE £ = 2. 



Column p and 
Column pointers {v, ^) 






(0,0) 


9 


(0,6) 


1 


(0,1) 


10 


(1,3) 


2 


(0,2) 


11 


(2,0) 


3 


(0,3) 


12 


(0,7) 


4 


(1,0) 


13 


(1,4) 


5 


(0,4) 


14 


(2,1) 


6 


(1,1) 


15 


(0,8) 


7 


(0,5) 


16 


(1,5) 


8 


(1,2) 


17 


(2,2) 



||S(o)s(i) ••• S(^)|| as defined in Q (or equivalently the 
bivariate polynomial S{x,y)). Assume that a true discrepancy 
is obtained in row Ki,. 

Let (j?, /i) = succ{'<H,{i^, fi))- Hence, Algorithm [T] can 
examine column {V, Jl) at row — 1 with the initial value 
T(a;, y) — X ■ T{x, y) , where Kj^ is the index of the row, 
where the last true discrepancy in the I7th sub-matrix S'^^^ was 
calculated. The polynomial T{x, y) is the stored intermediate 
polynomial for S^''', i.e., ku — and T{x, y) — AIku]. 

Proof: In terms of the inner product (see Definition |4|l, 
we have: 

{x'T{x, y), S(x, y)) =0, ie [kx7]o- 

Let us write T{x,y) = ELo E^=o ^i'^'^^^y*- We have 
T{x, y) = J2t=o Sj=i Tf\x^y^ and we compute: 

{x^T{x,y),S{x,y)) ^YY^^f ■ 

= {x^+'Tix,y),S{x,y)) 
which is zero for the rows of index i E [kj^ — 1]o- 

■ 

Similarly to the FIA for one Hankel matrix we can start 
examining a new /Ith column of the sub-matrix S'") in row 
Kx7 — 1. Note that the previous value of the row pointer K77 is 
stored in 

Before Algorithm [T] enters a new column, the coefficients 
of the intermediate bivariate connection polynomial T{x, y) 
give us the vanishing linear combination of the sub-matrix 
consisting of the first k^, rows and C,y^^ previous columns of 



the rearranged matrix S' (see (25 1). The following theorem 
summarizes the properties of Algorithm [T] 

Theorem 2 (Algorithm^: Let S = ||S(0) S^^) • • • S(^)|| be 
the n X X]t=o matrix as defined in (|23j and S{x, y) the 
associated bivariate syndrome polynomial for the reformulated 
Sudan interpolation problem. Algorithm [T] returns a bivariate 
polynomial T{x,y) such that: 

(xT(x,?/),S'(x,y)) = 0, Ke[n]o. 

The time complexity of Algorithm [1] is O (^£n^). 

Proof: The correctness of Algorithm [T] follows from the 
correctness of the basic FIA (see Theorem [T]) and from the 
correctness of the initialization rule (Proposition |2| consider- 
ing that Algorithm [T] deals with the column-permuted version 
S' of the original matrix S = ||S(") S^^' • • • SW||. 

The proof of the complexity of Algorithm [T] is as follows. 
We trace the triple: 

{{ly, n), {kq,ki, ...,Ki),S). 

where {i^, 11) is the current column pointer of Algorithm [T| 
examining the /ith column of the i^th sub-matrix S''^^ The 
variables kq,ki,. . . ,K£ are the values of the last row reached in 
the sub-matrices S*^"'', S^^^ . . . , S'^^-'. These values are stored 
in the array R in Algorithm [T] The value S is the number 
of already encountered true discrepancies of Algorithm [T] 
Assume {ly, /i) is the current column pointer of Algorithm u\ 
The two following events in Algorithm [T] can happen: 

1) Either, there is no true discrepancy, then Algorithm [T] stays 
in the same column and Ki, increases by one. The triple 
becomes 

((z^,/i),(KO,Kl,...,K^ + 1, . . . ,K£),(5). 

2) Or, there is a true discrepancy, then Algorithm [T] examines 
column [V,]!) = succ(-<//, (j^, /i)) and the triple becomes 

((17,71), (ko,K1, . . . ,Ki7 ^ Ki7 - 1, . . .,Ki),S ^ S 
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For both cases, the sum Iter over the triple is 



Iter = C^. 




(28) 



when Algorithm [T| examines the [v, /iVth column of 
the matrix llSf") S^^) • • • S('^)||. From m\, we have 



succ(^H, {v,^)) 



C(^^) + 1- The sum Iter increases by 



one in each iteration of Algorithm [T] The initial value of Iter 
is zero and the last value can be bounded by: 

Iter <0{n) + {In) + O [n) < O {tn) . 

Each discrepancy computation costs 0{n) and Algorithm [T| 
does not have to examine more than the (n+ l)th columns of 
the n X Et=o^t matrix S^^) • • • S(^)||. Thus, the total 

cost of Algorithm [l]is 0{ln^). ■ 
In the following, we illustrate the values of the row pointer 
K of Algorithm [T] when applied to a syndrome matrix S = 
||S(o) S^^) S^^^ll that consists of three Hankel matrices. 



C. Example: Sudan Decoding of a Generalized Reed-Solomon 
Code with Adapted FIA 

We consider a QTZS{16, 4) code over GF(17). For a decod- 
ing radius t = 7 = [{n — k)/2\ + 1, the list size is ^ = 2. 
The degrees of the three univariate polynomials (^('''(a;), 
g(i)(a;) and Q^^^x) are limited to (iVo,^i,^2) = (9,6,3) 
and we have more unknowns than interpolation constraints 
(iVo + Ni + N2> n). 

Figure |2] illustrates the row pointer of Algorithm [T| when 
the 16 X 18 syndrome matrix ||S^'^^ S^^^ S^^^jj is examined. 
The columns of the syndrome matrix are virtually rearranged 
according to the ^//-ordering and Algorithm [T] scans the re- 
arranged matrix S' column by column. The column-index ^ 



(see (27i) and the corresponding column pointer {v, fj.) are 



listed in Table U 

The three zig-zag Hnes S'^^K S''^' and S'^^) in Figure H] 
trace the value of the row pointer k for the three sub-matrices 
S(o), S^^) and S^^), which have a Hankel structure. The dots 
indicate the case, where a true discrepancy occurs. After the 
fcth column (here fc— 1 = 3), every second column corresponds 
to the same sub-matrix. 

After column 10 of the rearranged matrix S', every third 
column of S' corresponds to the same sub-matrix S^''^ Let us 
investigate two cases, where a true discrepancy in Algorithm[T] 
occurs. They are marked in column Co, 7 = 12 and Co,8 = 15 
of the re-arranged S' in Figure [2] In between column 12 and 15 
one column of the sub-matrices S*^^^ and S'^^ is examined by 
Algorithm[r| In column (0, 8), Algorithm [T] starts investigating 
the second row, because the true discrepancy in column (0, 7) 
occurred in the third row (according to Proposition |2]i. 

D. The FIA for a Vertical Band of Hankel Matrices 

The FIA can also be adapted to a matrix consisting of Han- 
kel matrices arranged vertically. This case has been considered 
for example in ||2], p2| . The basic idea for such a vertical band 
of Hankel matrices is the same as in the previous case. The 



rows of each sub-matrix of Hankel structure are scanned in a 
similar interleaving order as the columns of the previous case. 

The obtained time complexity for a vertical band of s 
Hankel matrices, where each sub-matrix consist of columns, 
is O {sN^). 

V. Gurus WAMi-SuDAN Interpolation Step with a 
Block-Hankel Matrix 

A. The Guruswami-Sudan Interpolation Step for Generalized 
Reed-Solomon Codes 

We consider again a Generalized Reed-Solomon code with 
support set ai, q;2, . . . , ««, multipliers v'i,v'2, ■ ■ ■ ,v'^^ and di- 
mension k, as introduced in Section [ll| Let vi,V2,---,Vn 
according to ^ be the multipliers of the dual Generalized 
Reed-Solomon code. 

Let (ri, r2, . . . , r„) be the received word. The Guruswami- 
Sudan decoding principle l|3)-0 improves the previ- 
ous algorithms by introducing an additional parameter 
s, which is the order of multiplicity for the n points 
{ai,ri/v[),{a2,r2/v'2),. . . ,{an,rn/v'J. The parameter s 
influences the decoding radius r and the list size £. The 
relationship between these parameters has been discussed in 
many publications (see e.g. [33]). 

Problem 3 (Guruswami-Sudan Interpolation Step f^)-' 
Let the aimed decoding radius r, the multiplicity s 
and the received word (ri, r2, . . . , r„) be given. The 
Guruswami-Sudan interpolation step determines a polynomial 
Qi^,y) = ELoQ^^'^W e F[x,y], such that 

1) Q{x,y)^0, 

2) mnlt (Q{x,y),{ai,ri/v'i)) > s, Vi G [n], 

3) wdegi, k-i Q(a;,y) < s(n - r). 

As in the previous section, let Nt denote the degree of the 
£ + 1 univariate polynomials Q(*)(a;). From Condition [sjl of 
Problem [3] we get: 



degQ^*'(a;) < Nt =^ s(n-r) -t(fc- 1), t e [e+l]o- (29) 

B. Univariate Reformulation of the Guruswami-Sudan Inter- 
polation Problem and A Block-Hankel Matrix 

We reformulate the Guruswami-Sudan interpolation prob- 
lem to obtain not one, but a system of several Extended Key 
Equations. The corresponding homogeneous linear system has 
a Block-Hankel form. 

Proposition 3 (Univariate Reformulation): Let the integers 
s, T, £ and the received vector (ri, r2, . . . , r„) be given. Let 
R(x) be the Lagrange interpolation polynomial, such that 
R{ai) — ri/v[, i e [n]. Let G{x) ~ YYi=i{x — ai). A poly- 
nomial Q{x,y) satisfies Conditions |2 1 andj3| of Problem |3] 
if and only if there exist s polynomials B'^^{x) e ¥[x\ such 
that 

Q[*1 (x, R{x)) = [x) ■ G{x)'-\ (30) 

and degB^^\x) < £{n - k) - st + b, b £ [s]o. 
Note that Q^''\x,y) denotes the 6th Hasse derivative of the 
bivariate polynomial Q{x, y) with respect to the variable y 
(see Definition [3|. 

We first prove the following lemma. 
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Lemma 2: Let (a.^, r^) G be given, and let R{x) £ ¥[x] 
be any polynomial such that R{ai) — r^. A polynomial 
Q{x,y) has multiplicity at least s at {ai,ri) if and only if 
ix--a,Y'b\Qib^ix,R{x)),ybe [s]o. 

Proof: After translation to the origin, we can assume that 
{ai^n) = (0,0), and i?(0) = 0, i.e., x\R{x). Let Q(a;,y) = 
Q,;(a;, y), where Qi{x,y) is homogeneous of degree j. 
We first suppose that Q{x,y) has at least a multiplicity s 
at (0,0), i.e., Qi{x,y) — 0, for i < s. Hence, we have 

Q[^l(x,i?(a;))= Qf\x,Ri^))- 

i>s — b 

For b < s, the polynomials (z, y) have no terms of degree 
less than s — b, and with x\R{x), we have x'^^'^\Qf\x, R{x)). 
It follows, that x"^'' divides Q^''\x,R{x)) for all b e [sJq. 

Suppose for the converse that x'^^''\Q^'^^{x, R{x)). That is, 
Q^''\x,R{x)) = x''-''U^'''>{x), for some polynomials U^'^^x) 
and b G [s]o. Using Taylor's formula with the Hasse deriva- 
tives p2] p. 89] we have: 

Q(x,2/)=^Q[''l(x,i?(x))-(y-i?(a;))^ 

b 

= ^Q[''l(x,i?(a;)).(y-i?(a;))^ 

fc<s 

+ ^Q[''l(x,i?(x)).(y-i?(x))'' 
= 5^x^-^[/(^-^)(x).(y-i?(x))'' 
^Q[''l(x,i?(x))-(y-i?(x))^ 



b<s 



b>s 



Now, (y — R{x))^ has only terms of degree higher than b, 
since x\R{x). Thus, we have no terms of degree less than s 
in Q{x,y). ■ 
Proof of Proposition pj From the previous lemma, we 
know that (x - aiy~''\Q^^{x, R{x)), b € [s]q, i £ [n]. Since 
all (x — Q!i)'s are distinct the Chinese Remainder Theorem for 
univariate polynomials implies that G{xy^''\Q^''\x, R{x)). 
The degree condition follows easily. ■ 
Proposition |3] enables to rewrite the s equations ( 30 1 more 
explicitly: 



E 

t=b 



}^'\x) ■ R{xY'^ = 

B^'\x) ■ G{xf-\ fee Mo. 



(31) 



As usual, let the reciprocal polynomials be: 



R[x) 
G{x) 



R{x'^), 



G{x-^)^\{{l~a^x), 



i=l 



B^'\x)=x'<^"-^^-'^-'-'-B{x-'), 



Inserting them into ( [3T] l, leads to: 



E 

t=b 



A(*)(a;) 



B^^\x) ■G{xy~\ 



(32) 



it ad- 



Since G{x) is relatively prime to 
mits an inverse modulo a;(^-'')("-'=). The Taylor series of 
R{xY-''/G{xY-'' is denoted by T^^^^\x). Then ^ leads 
to s equations: 



E 



^(£_f)(„_fe) ^ y(M)(2,) 



B [x) mod a; 



{i-b)(n-k) 



be 



where each equation is denoted by EKE(6). Note that the 
degree of B^^\x) can be greater than {£ — b){n — k) and it 
is not clear how to properly truncate this identity, as in ||9j, 
| fT0| , noted in Note [T] or as in the case of the classical Key 
Equation (see Section [Hi]). 

In the following, we consider the complete system of (^^^)'^ 
homogeneous linear equations. We have deg Q^''\x , R{x)) = 
s{n — t) + £{n — k) — b{n — 1). We obtain s equations for the 
6th derivative with the following truncation: 



^(^V(*)(x).x(^-*)("-'=).t(^'*)(x) 

t=b ^ ^ 

= B^''\x) mod ^^(n-r)+ein-k)-b(n-l) ^ ^ ^ [ 



(33) 



Let us write EKEo(5) for the 6th equation as above. 

Proposition 4: Let d — n — fc + lbe the minimum 
distance of the considered QTlS{n, k) code. Let 6 be 
such that ST - bd > 0. If A^^+i) (x), . . . , A(^) (x) is a 
solution to EKE(6), then there exists A('')(a;) such that 
AW(a;), A(''+i)(a;), . . . , A^^^fx) is a solution to EKEo(5). 
Proof: Let us consider (31 1. We isolate Q^''\x) and get 



t=b+l 



\t-b 



(34) 



^ b'^^Hx) ■ GixY 



-b 



and thus Q^''\x) is the remainder of the Euclidean divi- 
sion of Et=b+i QQ'-*Hx)R{xY~'' by Gixy-'', as long as 
degQW(a;) < degG(x)"-^ which gives s(n-T)-6(fc-l) < 
(s — b)n, i.e., st — bd > 0. ■ 
Note 2: We denote bo = [{sT)/d\. Actually, we can con- 



sider (32 1 and substitute the A('')(a;), for b G [6o], successively. 
This is possible for the case of the first order system (s = 1), 
noted in Note [T| In the more general Guruswami-Sudan case, 
we can obtain a reduced system with A'^''°+^^ (x), . . . , A^^^f (x), 
but it seems that this reduced system lost its Block-Hankel 
structure. Thus, there are no benefits of reducing the number 
of unknowns. We could not find a proper interpretation of the 
quantity bo — l{sT)/d\. 



With ( 33 1, we now can define the syndrome polynomials for 



the reformulated Guruswami-Sudan interpolation problem. 
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Definition 7 (Syndromes for Guruswami-Sudan): 
The syndrome polynomials 



with S'(^-*)(a;) = ^^t": 



(s-f))ri+7Vt-l Q(b,t) i 



1=0 



S\ are given by: 

b e [s]o, 



i+(f)+i+t("-i)-s")' " ~ ^"J"' (35) 
where T^'''*\x) denotes the power series of 

Rixy-yGixy-''. 

The (sth order) Extended Key Equations are 



^A(*)(x) 

t=b 



with degB^''\x) < £{n - k) - st + b, b e [s]q. 
The explicit expression for S'^'''*^ is difficult to obtain. We 
claim that it will not be easier to compute S'j'''*'' with such 
a formula than by calculating the power series expansion of 
r('''*)(x) = R{xY~''/G{xy~'', which is fast to compute by 
computer algebra techniques. 

Considering the high degree terms, we get ^^^g(s — 6)n = 
(''^^jn homogeneous equations from i36\, which can be 
written as: 



(36) 



b'^'^x) mod ^s{n-r)+iin-k)-bin-l)^ 



i Nt-1 

EE< 

t=b i=0 



■ - 0, je [{s - b)n]o, 

be [s]o- 



(37) 



These linear equations lead to a Block-Hankel matrix. The 
syndrome matrix S = ||S(*'^^|| for all t e [£ + l]o,b G [s]o 
of the reformulated Guruswami-Sudan interpolation problem 
has the following form: 



S(i'i) 
V ... 



s('*-i''*-i) 



g(s-l,«) J 



(38) 



where each sub-matrix S^'''*^ ~ 1 1 S'l''^'*'' 1 1 is an n{s ~ b) x Nt 
Hankel matrix and S'^'^'^^x) = J2 



{s-b)n+Nt-l Q{t,b) i 



.(ft,*) 



Si x^ are 
-5*1+*^ All matrices 



the associated polynomials with S'j ^ 
depend on the received vector r except the ones on the 
diagonal: S^*'*^ i G [s]o. 



C. The FIA for the Block-Hankel Matrix of the Reformulated 
Guruswami-Sudan Interpolation Problem 



We adapt the FIA to the Block-Hankel matrix of ([38 1. 
The structure of this syndrome matrix is a mixture of the 
syndrome matrix (see Definition |2| of the reformulated Sudan 
interpolation problem and a vertical arrangement of many 
Hankel matrices. The extension of the FIA for this case was 
hinted in [10, Section 5.2]. First of all, let us express the s 



Key Equations of ( 37 1 in terms of the inner product of bivariate 
polynomials. 



Problem 4 (Reformulated Guruswami-Sudan Problem): 
Let S**-^' (x, ?/), b S [s]o be s bivariate syndrome polynomials 
with: 

I Nt + {s-b)n-l 
t=b i=0 

where the coefficients S^^''^'' are given in Definition [t] We 
search a nonzero bivariate polynomial T{x, y) that fulfills: 



n e [(s - i9)n]o. 



(40) 



Algorithm 2: Algorithm Solving Problem |4] 
Input: s bivariate polynomials 

Output: Bivariate polynomial T(x,y); 
Data structures : 

Bivariate polynomial T{x,y) = '^\^QT'^*\x)y*\ 
Column pointers {uj^jl), where v £ \P\o, fi e [A^i/]o; 
Row pointer (^?, k), where j9 e [s]o and k e [{s — 'i9)n]o; 
Two-dimensional array j4[(«, j)] of entries in 

F[2;, y] indexed with the row pointer {■&, k); 
Two-dimensional array D[{i,j)] of (''2^)rt entries in F 
indexed with the row pointer {■&, k); 
Array _R of £ + 1 entries containing the row pointer 

Variable A e F, variable compute e {TRUE, FALSE}; 
Initialize : 

Initialize arrays A, D and C to zero; 

^ (0,0) and k) 4- (0,0); 
compute FALSE; 

1 while (d, k) < {s, 0) do 

2 if compute then 

I {x'' ■T{x,y),S^^^^\x,y)); 

else 

it R[v]<l then 

T{x,y)^y" -xi-; 



9 
10 
11 
12 
13 
14 
15 

16 

17 

18 
19 
20 

21 
22 
23 
24 
25 
26 
27 



Si 

^ (0,0); 



else 



T{x,y)^x-A[R[u]]{x,y)- 
A ^ D[R[u]]; 
{■d,K) ^ R[u]; 
if K = then 

A ^ 0; 



l,n); 



K ^ K — 1; 

compute TRUE; 

if A = or D[(i?, k)] ^ then 
if A / then 

I T{x,y) ^ T{x,y) - ^^^^^ ■ A[{&, K)]ix,y)- 

(j9, k) ^ succ(^v'i ('^i k)); 
else /* A 7^ and D[(i?, k)] = V 
A[{i},K)]^T{x,y); 
D[{-&,k)] ^ A; 
R[u] ^ ('i9,re); 
compute FALSE; 
{u,p) ^ succ(^if, 
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We adjust the FIA as an algorithm on a row- and column- 
interleaved version of the Block-Hankel matrix S of ( |38| l. Let 
us first define an ordering to describe the vertical rearrange- 
ment of the rows of the syndrome matrix S as in ( [38] l. Let 
denote -<v the ordering on the rows, indexed by pairs k), 
such that: 



K + -dn < K + 'dn 
or 

K + -dn = Ti + dn and ■§<■§. 



(41) 



Let succ(^\/, k)) denote the pair that immediately fol- 
lows {d, k) with respect to order defined by and let 
pred(^y, (i?, k)) denote the pair that immediately precedes 
{■d, k) with respect to order defined by -<v- Furthermore, let: 



(42) 



which we use to index the rows of the virtually rear- 
ranged matrix (similar to the horizontal case). Note that 

^pred(^y,(?9,K)) = ^^Sa ^ 1- 

In the following, S' denotes the rearranged version of the 
matrix S of ( |38| ), where the columns are ordered under -<h- 
and the rows under ^y -ordering. 

Algorithm|2]is the Fundamental Iterative Algorithm tailored 
to a Block-Hankel matrix as in ([38]l. As in the case of the 
reformulated Sudan interpolation problem, the columns of the 
Block-Hankel matrix S are indexed by a couple where 
v € [^+l]o and /i e [Afi/]o- Furthermore, the rows are indexed 
by a couple {-d, k), where i? e [s]q and kg [(s — i?) • n]o. 

Now, the arrays storing the discrepancies and the interme- 
diate polynomials are still indexed by rows, but the indexes 
of the rows are two-dimensional, leading to two-dimensional 
arrays. The two-dimensional array A stores the intermediate 
bivariate polynomials and the two-dimensional array D, stores 
the discrepancy values. Both arrays A and D are indexed 
by the row pointer The discrepancy calculation (see 

Line 20 of Algorithm |2| is adjusted to a Block-Hankel 
matrix where each sub-horizontal band of Hankel matrices is 
represented by a bivariate polynomial. 

The intermediate bivariate connection polynomial T^'^''^^{x) 
of Algorithm |2] examining the Kth row and the /ith column 
of the (i^, i?)th sub-matrix S^''^'''', gives us the vanishing linear 
combination of the sub-matrix consisting of the first i?^ ^ rows 
and the first C^_^ columns of the rearranged syndrome matrix 



sub-block 
array R[i/]. 



need to be 



The row pointer of the 
||S(!.,o)s(>'4) ... s(''^«-i)||^ is stored in the 
Note that £ + 1 row pointers of the form {■&, n 
stored. 

The adjusted initialization rule of Algorithm [2] examining 
the Block-Hankel syndrome matrix as defined in p8] l is stated 
in the following proposition (see Line 16 [2T 
Algorithm |2]). 

Proposition 5 (Initialization Rule): Assume Algorithm [2] 
examines column [v, ji) of a Block-Hankel syndrome matrix 
S as defined in ( [38] l or equivalently the s bivariate polyno- 
mials S^^\x,y)^\x,y),...,S^'-^\x,y) of Problem |4] 
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Assume that a true discrepancy is obtained. Let iv^ji) — 
succ(^^f , [v^ ii)) and let k) be the previously stored value 
for the index of the last reached row in the sub-matrix of 
index V, and let T{x, y) be the bivariate polynomial stored 
for that row. If = pred(^y , (i?, k)), we can start 

examining column {V,]!) of S at row with the initial 

value T{x, y) — x ■ T{x, y). 

Proof: In terms of the inner product (see Definition [4|i, 
we have: 

{x''T{x,y),S^''\x,y)) = 0, V(i2,«i) <v {^.^)- (43) 

Let us write T{x,y) = EJLq E?=o ^nd T[x,y) = 

: Tf\, for j > 0, and 
0. Due to the structure of the Block-Hankel matrix 



with T 



(*) 



s: 



(»2,t) 



S, we have the following identities: 

{x'^T{x,y),S^'-\x,y)) 

t=0 j = l 
t=o j=l 

= {x^^+'T{x,y),S^'-^Hx,y)) 



(Hankel) 



reformulated 



which is zero for every («2,«i) -<v (^^i^). 

Theorem 3 (Algorithm ^: Let S be the 
syndrome Block-Hankel matrix of the 
Guruswami-Sudan interpolation problem as in (38i and 
let S^''\x,y),b e [s]o be the corresponding bivariate 
syndrome polynomials as defined in Problem |4] Then 
Algorithm |2] outputs a bivariate polynomial T{x,y), such 
that: 

{x-T{x,y),S^'^\x,y))=0, z9 G [s]o, 

K E [{s ~ i?)n]o- 

The time complexity of Algorithm |2] is O (^s^n^). 

Proof: The correctness is as usual, considering that we 
deal with the row- and column-permuted version S' of the 
Block-Hankel matrix S and that the initialization rule is 
correct. 

In the following, we analyze the complexity of Algorithm |2] 
As in Section IV we describe the state of Algorithm |2] with 
the following triple: 



{{'^,1^), {[i^,k]q, ['d,K]i, ['d,K]e),6), 



(44) 



where {ly, fi) is the current column pointer of Algo- 
rithm |2j when examining the /ith column of the hor- 
izontal band of s vertically arranged Hankel matrices 
||S(i^,o) s(^>i) ... S('''"-i)|f. The index [d.n]^ is the last 
considered row in the horizontal band of s sub-matrices 
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||S(^,o) gC-^a) ... s(''^'^-i)||'^. These values are stored in the 
array R of Algorithm |2] As for Algorithm [T] S denotes the 
number of already encountered true discrepancies. Assume 
(ly, fi) is the current column pointer of Algorithm |2] The same 
two cases as before can happen: 

1) Either, there is no true discrepancy, then Algorithm [2] 
remains in the same column (z^, fi) of the sub-matrices 
||g(^,o) gC-^a) . . . s(''^'^-i)||T and the triple becomes: 

{{>^,f^),{[l^,K]o,[^,K]l,..., 

2) Or, a true discrepancy is encountered and the triple be- 
comes: 

k]t7 ^ prevHv, k]tj)], . . . , K]i),5 + l), 

where {V,]!) -s— succ(-</f , (t/, /i)). In both cases, the sum Iter 
of the triple is: 



(45) 



Iter = a,p + I ^[''^-1* + ^' 

when Algorithm |2] examines the (v, /i)th column of the Block- 
Hankel matrix S of ( 38 1 and it increases by one in each 
iteration. The initial value of Iter is zero, and the final value 
can be bounded by 



Iter < I ^ \n 



E 

t=0 



1 



s + 1 
2 



< 



O {I 



The number of iterations of Algorithm |2] is bounded by 

This gives a total of O (Is'^ n^), since the discrepancy 
calculation requires O (s^n). ■ 



D. Example: Guruswami-Sudan Decoding of a Generalized 
Reed-Solomon Code with Adapted FIA 

We consider the case of multiplicity s = 2 for the 
QTZS{16, 4) code. The corresponding list size is £ ~ 4. 
The decoding radius is now t — 8. The degrees of the 
univariate polynomials Q'^'^^{x) are {Nq, Ni, N2, N^, N4^) — 
(16,13,10,7,4). 

The Block-Hankel syndrome matrix S 

g(0,0) g(0,l) g(0,2) g(0,3) g(0,4) 
S(l'l) S(1'2) g(l,3) g(l,4) 

is a (3n — 48) x (X)t=o ~ ^'-') ni^tri''^- It consists of 
nine non-zero Hankel matrices and one all-zero matrix S*^^ ") 
arranged in two horizontal bands of five Hankel matrices. 
The values of the row pointer {{), k) of Algorithm |2] for the 
Block-Hankel matrix are traced in Figure l3l The five zig- 
zag lines S^'^^"\ S^^^^\ in Figure^ ti-ace the row 
pointer {1}, n), when Algorithm l2]examines the five sub-blocks 

||g(0,0)g(l,0)||T ||S(0.1)S(1'1)F, ||S("'4)g(l,4)||T^ j„ 

Table the column and the column pointer {v, 11) 

according to for the syndrome matrix of the QTZS{1Q,4) 



code are listed. Additionally to the horizontal ordering of 
the columns (as in the Sudan case), now the rows are ordered 
according to ^y. The row-index and the row pointer 



k) are shown in Table III Let us consider three cases. 



TABLE II 

Column-index C„^^ and column pointer {u, fi) for the 
Block-Hankel syndrome matrix of a 57?.5(16, 4) code with 
multiplicity s = 2 and list size £ = 4. 



Column Ci/,^ and 
Column pointer {u, fi) 





(0,0) 


10 


(1,3) 


20 


(2,3) 


30 


(0,12) 


40 


(0,14) 


1 


(0,1) 


11 


(2,0) 


21 


(3,0) 


31 


(1,9) 


41 


(1,11) 


2 


(0,2) 


12 


(0,7) 


22 


(0,10) 


32 


(2,6) 


42 


(2,8) 


3 


(0,3) 


13 


(1,4) 


23 


(1,7) 


33 


(3,3) 


43 


(3,5) 


4 


(1,0) 


14 


(2,1) 


24 


(2,4) 


34 


(4,0) 


44 


(4,2) 


5 


(0,4) 


15 


(0,8) 


25 


(3,1) 


35 


(0,13) 


45 


(0,15) 


6 


(1,1) 


16 


(1,5) 


26 


(0,11) 


36 


(1,10) 


46 


(1,12) 


7 


(0,5) 


17 


(2,2) 


27 


(1,8) 


37 


(2,7) 


47 


(2,9) 


8 


(1,2) 


18 


(0,9) 


28 


(2,5) 


38 


(3,4) 


48 


(3,6) 


9 


(0,6) 


19 


(1,6) 


29 


(3,2) 


39 


(4,1) 


49 


(4,3) 



where a true discrepancy in Algorithm |2] occurred. The first 
case are the most left two points in Figure [3] The value of the 
column pointer {1^,11) is (0,2) and (0,3). Algorithm [3] exam- 
ines the first band of the two Hankel matrices | jS"^"'") 8^^'°^ 1 1"^ 
traced by line 3^"^'^^ For the first pair no columns were 
virtually interchanged and the horizontal distance is one. 

The second two points with the values of the column 
pointer (0, 5) and (0, 6) indicate a true discrepancy of Al- 
gorithmic] when the second band of the two Hankel matrices 
I IS^'i) S^i'i) 1 1"^ is examined. The values are traced by the 
line S'(''^i) in Figure [3] For the second pair ((0, 5),(0, 6)), 
the columns of the first and second vertical band of Hankel 
matrices are mixed and therefore the horizontal distance is 
two. 

TABLE III 

Row-index _R,5_„ and row pointer (1?, k) of Algorithm[2]for 

BLOCK-HANKEL syndrome matrix of a 57?.cS(16, 4) CODE WITH 
multiplicity S = 2 AND LIST SIZE i = A. 



Row R^^K. and 
Row pointer k) 



- 16 
17 
18 
19 
20 

46 
47 



(0,0 - 16) 
(1,0) 
(0,17) 

(1,1) 
(0,18) 

(0,31) 
(1,15) 



The third considered case, where a true discrepancy occurs, 
are the most right two points in Figure [3] indicated by values 
(1,10) and (1,11) of the row pointer (i?,k). Algorithmic] 
examines the band of the two Hankel matrices | jS'*'''^^ S'^''^) 1 1 
and restarts (at the point (1, 10)) with the previous stored value 
of the row pointer (at (1, 11)). In between four other horizontal 
bands of matrices were examined. 
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fViliTmn of the riRarFiaii^ii^EKl blnck-IIankciL nLacrix S' 

Fig. 3. Illustration of the row pointer k) of Algorithmplapplied to a 48 X 50 Block-Hankel matrix S. The matrix consists of two vertically aiTanged bands 
of five horizontally arranged Hankel matrices. The first band consists of 32 rows and the second one of 16. The plotted matrix S' consists of the rearranged 
columns and rows of the matrix S under ^ij- respective -<v -ordering . The mixture of rows of the two vertical lines starts in line 16 (marked by the dotted 
horizontal line). The five zig-zag lines S^''^") , S'^''-^' , . . . , S^''''') trace the row pointer for the five sub-blocks ||S("'0) s(i'0)||^, ||S(i'") S(i^i)||^, . . ., 
llSt^'O) S'^'^'ll"^ of two vertically arranged Hankel matrices. 



VI. Conclusion 

We reformulated the Guruswami-Sudan interpolation con- 
ditions (for a multiplicity higher than one) for Generalized 
Reed-Solomon codes into a set of univariate polynomial 
equations, which can partially be seen as Extended Key 
Equations. The obtained set of homogeneous linear equations 
has a Block-Hankel structure. We adapted the Fundamental 
Iterative Algorithm of Feng and Tzeng to this special structure 
and achieved a significant reduction of the time complexity. 

As mentioned in Note |2j the set of equations can be further 
reduced, under the observation that the diagonal terms are 
constant, i.e., they do not depend on the received word. This 
reduction leads to a loss of the Block-Hankel structure and 
therefore would destroy the quadratic complexity. We note 
that Beelen and H0holdt [34 | mentioned this reduction for the 
Guruswami-Sudan interpolation step for Algebraic Geometric 
codes, to get a smaller interpolation problem, but the system 
does not appear to be Block-Hankel. 

We conclude that we identified the quantity [(st)/c?J (see 
Note |2]i without having found an interpretation of that number. 
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